Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBbjH_flrtKnMfy889IJ750ikgY.roa
File: SBbjH_flrtKnMfy889IJ750ikgY.roa (raw, json)
Hash identifier: N+d5q7tyQjrFYC6zjgg8upahTncg32NsYihf1GblNOI=
Subject key identifier: 48:16:E3:1F:F7:E5:AE:D2:A7:31:FC:BC:F3:D2:09:EF:9D:22:92:06
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186FACB384E6FF550F3DD0C95A6B1C6C565
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBbjH_flrtKnMfy889IJ750ikgY.roa
Signing time: Sun 19 Mar 2023 16:54:27 +0000
ROA not before: Sun 19 Mar 2023 16:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 07:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fa:cb:38:4e:6f:f5:50:f3:dd:0c:95:a6:b1:c6:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 19 16:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4816e31ff7e5aed2a731fcbcf3d209ef9d229206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:82:cd:37:4e:6b:8e:91:4f:06:98:71:e6:
7a:b5:30:58:21:7c:e4:d4:f7:2b:62:4f:83:10:99:
87:14:09:66:22:6b:f6:0f:23:00:78:25:83:7d:b9:
29:16:b0:54:76:39:63:1d:49:e7:9b:5a:ba:1d:90:
ba:71:98:86:7a:5e:15:2c:8b:ac:f8:a3:5a:fd:ee:
36:cc:2b:20:cb:e2:d2:18:ec:cc:1e:03:4b:d6:a2:
4c:9c:57:bf:39:cc:82:df:6d:bf:24:5b:ff:cc:fc:
8b:15:bd:28:cd:85:30:9f:e2:03:c4:35:34:0d:cf:
a4:4e:cd:02:7b:0e:ba:d3:86:64:76:8f:01:f0:cc:
1e:1d:7f:ff:05:4a:c6:db:88:1a:f7:f0:86:7b:3f:
53:6e:78:5b:fc:c8:ba:fe:08:41:fc:6b:ca:6c:5d:
78:e7:89:50:5d:a8:b5:6e:b3:78:36:fc:6f:9e:e2:
ef:3f:fa:1c:5f:0e:fb:66:71:c0:d8:70:26:e1:f3:
cb:5d:c1:7d:5c:bc:a6:c3:83:53:19:da:9c:44:2c:
cf:28:53:f2:85:63:f7:b4:e5:30:ab:5a:83:86:c4:
c5:6e:7f:b2:ea:f5:17:a5:03:60:f1:a9:b8:4a:ec:
e7:b9:4a:4d:06:5b:0d:ac:d4:d4:1c:f4:79:25:c8:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:E3:1F:F7:E5:AE:D2:A7:31:FC:BC:F3:D2:09:EF:9D:22:92:06
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBbjH_flrtKnMfy889IJ750ikgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.174.0/23
84.32.177.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.227.0/24
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.111.0/24
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.186.0/24
88.216.189.0/24
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
53:1f:7c:60:92:ee:9c:a6:cd:e4:71:5d:13:36:ec:b1:8c:5d:
0f:db:01:5a:13:ed:80:b2:28:73:cd:ba:d7:71:1d:f6:86:be:
ec:74:66:40:71:86:15:39:66:cd:6d:22:cb:f8:fa:62:62:ae:
f3:07:ec:de:80:60:ce:d1:cf:f1:b3:46:38:29:5d:99:a3:4b:
1a:9c:d6:87:9a:0f:a9:2a:0a:2b:05:6a:5a:07:c2:93:5b:bf:
dc:24:89:bd:a7:f6:b6:7b:13:6c:ef:6a:50:0e:38:f7:5d:95:
19:40:18:fe:13:b0:6b:c5:61:74:ab:62:28:d4:7a:14:cd:1a:
2f:c1:3a:3c:37:1c:8d:59:f8:52:76:2c:ae:96:79:5d:c8:5e:
c0:11:8b:77:65:f2:b0:6e:aa:08:be:88:38:49:5f:77:52:4a:
a8:df:9a:57:30:28:ac:cd:96:72:87:7e:41:96:af:7a:1b:3f:
49:22:74:13:26:7d:ac:f0:40:bb:7a:d4:39:e6:d0:76:8d:4b:
f2:0a:72:69:cd:f2:6f:99:a3:26:26:de:33:2b:97:33:7b:00:
08:26:4f:53:c8:41:52:01:d7:13:84:31:0a:35:0e:71:59:4d:
22:d0:32:33:48:9d:6c:bf:e7:28:9f:50:63:31:32:44:a2:ba:
57:50:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org